Red Hat Product Errata RHSA-2024:6153 - Security Advisory
Issued:
2024-09-03
Updated:
2024-09-03

RHSA-2024:6153 - Security Advisory

Synopsis

Moderate: 389-ds-base security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2292104 - CVE-2024-5953 389-ds-base: Malformed userPassword hash may cause Denial of Service

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
389-ds-base-1.3.11.1-6.el7_9.src.rpm SHA-256: 26998feedf4226e2a6c45da379811b719bfab394056745f4a9ee630c956b1fdd
x86_64
389-ds-base-1.3.11.1-6.el7_9.x86_64.rpm SHA-256: f02190b640382648926b149b0c52cc24f8ec07390cc8554e2fde16232a1c0290
389-ds-base-debuginfo-1.3.11.1-6.el7_9.x86_64.rpm SHA-256: 8e0d1226462e355230b1859f7c816d487544814185d092e96480dd58c688c118
389-ds-base-debuginfo-1.3.11.1-6.el7_9.x86_64.rpm SHA-256: 8e0d1226462e355230b1859f7c816d487544814185d092e96480dd58c688c118
389-ds-base-devel-1.3.11.1-6.el7_9.x86_64.rpm SHA-256: 854de1d558b6b7a7c1adba4c69fa1a4667a24ae116c070bb17b3bcbc0eb044be
389-ds-base-libs-1.3.11.1-6.el7_9.x86_64.rpm SHA-256: edee92f64b3bc450ce11cb1d24f72b15d113a7142b9477427492df613534037a
389-ds-base-snmp-1.3.11.1-6.el7_9.x86_64.rpm SHA-256: 2657fadf97e16f137358dac04e1f55f987e424c587ca95d8274ee49cde909e79

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
389-ds-base-1.3.11.1-6.el7_9.src.rpm SHA-256: 26998feedf4226e2a6c45da379811b719bfab394056745f4a9ee630c956b1fdd
s390x
389-ds-base-1.3.11.1-6.el7_9.s390x.rpm SHA-256: 1bea21bbf0018765a6ee7c104607d0d783ab5ba619b6fe769a1b4fd21bb39ac1
389-ds-base-debuginfo-1.3.11.1-6.el7_9.s390x.rpm SHA-256: 0afed502982b090a79d0970371d2c7e6948bc546624bac875fd1af1d151d2a8b
389-ds-base-devel-1.3.11.1-6.el7_9.s390x.rpm SHA-256: b5ce8323c1965df197c03fbeef8939013fc8fd1a3aae530e78d0c8937c0be0e2
389-ds-base-libs-1.3.11.1-6.el7_9.s390x.rpm SHA-256: 2f0e906489e7cc7076a732f0379ff64010bd7661c353581680ceb12ad7b1a15c
389-ds-base-snmp-1.3.11.1-6.el7_9.s390x.rpm SHA-256: f3c388e70c5046cb01e2314b667e6c9aa16d108d7a0a94a055f5c8497338cf7c

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
389-ds-base-1.3.11.1-6.el7_9.src.rpm SHA-256: 26998feedf4226e2a6c45da379811b719bfab394056745f4a9ee630c956b1fdd
ppc64
389-ds-base-1.3.11.1-6.el7_9.ppc64.rpm SHA-256: 544167db053290e60dbf0ffbd58d00b5b7d05774b8b5b237e4307f49c01f1adc
389-ds-base-debuginfo-1.3.11.1-6.el7_9.ppc64.rpm SHA-256: f22973f34b41cf7a7d7f601f8409161cf68d626eae28fc15f0c6d213f1166b5b
389-ds-base-devel-1.3.11.1-6.el7_9.ppc64.rpm SHA-256: 742a25538abcc1efeaedcbb53b6bfc825795e642f58f0dc4916bcd3160df33d7
389-ds-base-libs-1.3.11.1-6.el7_9.ppc64.rpm SHA-256: df8af05b8036065e4319a91ac091334908f5a18d4f95a2958dae4f29306946b5
389-ds-base-snmp-1.3.11.1-6.el7_9.ppc64.rpm SHA-256: acf343acf251c65bef7f60f27a18cf6aac88ebdbf1e84c940af8111c297c3b08

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
389-ds-base-1.3.11.1-6.el7_9.src.rpm SHA-256: 26998feedf4226e2a6c45da379811b719bfab394056745f4a9ee630c956b1fdd
ppc64le
389-ds-base-1.3.11.1-6.el7_9.ppc64le.rpm SHA-256: e54ea75fa3de9e9b6a6745cce42a8b45518d17648d4da1a588321107703c8d51
389-ds-base-debuginfo-1.3.11.1-6.el7_9.ppc64le.rpm SHA-256: 4a7275ab71d5b6491fbb0ecac33f9dadb93001713b5291bdabddcff980e78209
389-ds-base-debuginfo-1.3.11.1-6.el7_9.ppc64le.rpm SHA-256: 4a7275ab71d5b6491fbb0ecac33f9dadb93001713b5291bdabddcff980e78209
389-ds-base-devel-1.3.11.1-6.el7_9.ppc64le.rpm SHA-256: 857e433b012c0512f78d8fe2204a67874ea8e32d97794b660344c19bed86b2b7
389-ds-base-libs-1.3.11.1-6.el7_9.ppc64le.rpm SHA-256: 69ab430c36bfbc4a3dde595388958b205ad3cc57ca458f430bb005bbdc6c3ccd
389-ds-base-snmp-1.3.11.1-6.el7_9.ppc64le.rpm SHA-256: cb44e6ce7dfb45064426a97a17d7eb3df5b5b382355984d21f0ce2bbae2780b1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.